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SENDING CONTROL INFORMATION WITH DATABASE STATEMENT 
FIELD OF THE INVENTION 

[0001] The invention relates to database statements in general More specifically, the 

invention relates to security access granted to and/or resources allocated to a database statement. 

BACKGROUND 

[0002] The approaches described in this section are approaches that could be pursued, but 

not necessarily approaches that have been previously conceived or pursued. Therefore, unless 
otherwise indicated, it should not be assumed that any of the approaches described in this section 
quahfy as prior art merely by virtue of their inclusion in this section. Similarly, unless otherwise 
indicated, it should not be assimied that a problem has been recognized by the prior art merely 
because the problem is discussed in this section. 

[0003] For convenience of expression, various entities that represent sets of instructions 

(e.g. functions, queries) are described as performing actions, when in fact, a computer, process, 
database server, or other executing entity performs those actions in response to executing or 
interpreting the set of instructions. For example, a function may be described as determining that a 
condition exists or a query may be described as accessing information. These are just convenient 
ways of expressing that a computer, process, database server or other executing entity is 
determining that a condition exists in response to executing a function or is accessing data in 
response to executing or computing a query. 

[0004] A database server, also referred to as a database management system (DBMS), 

retrieves and manipulates data in response to receiving a database statement. Typically the database 
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statement conforms to a database language (e.g., a query language), such as Structured Query 
Language (SQL). A database statement can specify a query operation, a data manipulation 
operation, or a combination thereof. A database statement that specifies a query operation is 
referred to herein as a query. The present invention is not limited to database statements that 
specify a particular type of operation. Some other examples of database statements other examples 
of database statements are updates and deletes. However, for the purpose of explanation, 
embodiments of the present invention are illustrated using queries. 
[0005] A database language, as the term is used herein, is a declarative language. A 

declarative language provides constructs for describing results but not steps performed to generate 
the results. The data base language SQL, for example, provides constructs for specify what data 
field to provide (e.g., the SELECT and FROM clauses specify the columns in the results), and the 
WHERE clause to specify criteria (e.g. a predicate) that the data should satisfy. The database 
statement is submitted to a database server, which has components that figure out how to compute 
the resuhs, and the resuhs are generated accordingly. See Kaufinan et al., Beginning SOL 
Programming . Wrox Press Inc (March 2001), the contents of which are also incorporated herein by 
reference. 

[0006] It is often useful to convey information about database statements to a database 

server other than information that only describes the results. Such information is referred to herein 
as database statement control information, or just control information. For example, it is useful to 
provide instructions to a query optimizer about how to generate an execution plan for a database 
statement. An approach for conveying such information is to use an "optimizer hint". An optimizer 
hint is an instruction embedded in a database statement that is interpreted by a query optimizer to 
assist it in determining an execution plan for executing a database statement. An optimizer hint may 
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specify an index to scan when computing the results of a query. Optimizer hints and execution plan 
are described in further detail in Daniel ManHung Wong, et al., US Patent Application S.N. 
10/431,071, entitled "DYNAMIC GENERATION OF OPTIMIZER HINTS", the contents of 
which are incorporated herein by reference, and in Oracle 9i Database Performance Guide and 
Reference, Release 1 (9.0.1), Part Number A87503-02, the contents of which are also incorporated 
herein by reference. 

[0007] A drawback of optimizer hints is that optimizer hints may be used for conveying 

information only about generating an execution plan. The information is only conveyed to the 
query optimizer, the component of database server responsible for generating execution plans. 
Often, it is useful to convey other types of control information to other components of a database 
server, such as security information to access control components of a database server, priority 
information to scheduling components of the database server, or information to non-native user- 
supplied components of database server (e.g., user-suppHed functions). 

One such mechanism that allows such information to be conveyed is the user context, which 
includes user context information. User context information is data which is maintained by a 
database server and that is associated with a database session. A database session is the 
establishment of a particular connection between a client and a database server through which a 
series of calls to the database server may be made. The period of time the client remains connected 
in the database session is referred to as the session window. Thus, the session window ends when 
the session is terminated. 

[0008] A user context includes various attributes, such as the user id identifying the user 

associated with the database session and application id identifying an application associated with 
the database session. The user context information is accessed by the database server and its 
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various components. For example, the user context information may be accessed by an access 
control component to determine access control information. Some attributes may be set only by a 
database server, by a user (via an API call), or by a user subject to certain security restrictions 
imposed by the database server. A user context is useful for storing and conveying information to 
various database server components. 

[0009] A drawback to using a user context is that the information is only stored in memory 

allocated to database sessions, which is referred to herein as session space. The user context is 
stored in the session space of a database session, and therefore does not persist beyond the session 
window of the database session. 

[0010] For example, within a database session, a user submits a query that is to be executed 

by a background process or background server at a later scheduled time. Subsequent to the end of 
the session window, the background process executes the query. Because the user context is no 
longer stored, it cannot be used to convey information to the background process when it computes 
the query. 

[001 1] Thus, there is a need for a mechanism that conveys control information other than to 

a query optimizer outside a database session. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

[0012] The present invention is illustrated by way of example, and not by way of limitation, 

in the figures of the accompanying drawings and in which like reference numerals refer to similar 
elements and in which: 

[0013] FIG. 1 shows a system in which control information is sent with a database 

statement, upon which an embodiment of the present invention may be implemented. 
[0014] FIG. 2 is a block diagram that illustrates a computer system upon which an 

embodiment of the present invention may be implemented. 
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DETAILED DESCRIPTION OF THE INVENTION 

[0015] A method and apparatus for sending control information with database statements is 

described. In the following description, for the purposes of explanation, numerous specific details 
are set forth in order to provide a thorough understanding of the present invention. It will be 
apparent, however, that the present invention may be practiced without these specific details. In 
other instances, well-known structures and devices are shown in block diagram form in order to 
avoid unnecessarily obscuring the present invention. 

[0016] Several features are described hereafter that can each be used independently of one 

another or with any combination of the other features. However, any individual feature may not 
address any of the problems discussed above or may only address one of the problems discussed 
above. Some of the problems discussed above may not be fully addressed by any of the features 
described herein. Although headings are provided, information related to a particular heading, but 
not found in the section having that heading, may also be found elsewhere in the specification. 

FUNCTIONAL OVERVIEW 

[0017] Sending control information with database statements (e.g., queries, updates, 

deletes, or any other type of database statement) is disclosed. Sending the control information with 
the database statements may provide information about the database statement that may be 
conveyed to other applications or database components. The control information provided may be 
used for allocating resources, for example. The control information may be appended to database 
statements by adding a tag to the database statement. The control information is executed by a 
background server, and is stored and available to the database server even after the user session has 
ended. In this specification, the term "background server" is used to refer to the objects, processes 
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and/or threads that are associated with the database server that run in the background, without 
accessing the session space, without accessing the user context, or when the user is not connected 
to the database server. Some examples of control information are security information, priority 
information, or information specific to components supplied by the user to the database server. An 
example of security information is information related to which components or data the database 
statement may access. An example of priority information is a priority level that is used to 
determine which database statement is given priority, and executed first. Unlike optimizer hints, 
the control information may be suppUed to the database server. Alternatively, the control 
information is supplied to other components in addition to or instead of the database server. For 
example, the security information may be suppUed to security components, and the priority 
information may be supplied to scheduling components. 

[0018] In an embodiment, the control information is also available to a systems 

administrator and/or to software that performs administrative functions such as scheduling the 
execution of programs. In an embodiment, the database execution interface includes a mechanism 
for binding a tag to each database statement. In an embodiment, unlike performance hints, the tag 
is interpreted by the database server. In an embodiment, the tag is extracted fi-om and stored along 
with the corresponding database statement. In an embodiment, an interface is include that exposes 
the information associated with the tag allowing developers to extend the database server by 
modifying how the database server treats the database statements based on the new information. In 
an embodiment, the database application is able to communicate application specific preferences to 
the database server, further allowing developers to customize database server for the applications 
using the database server. The database server of an embodiment of the invention recognizes 
information passed in the tag, processes the information, and in response, enforces additional 
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application policies, such as access control, quality of service, or auditing of the database server. 
The database server may use the information in the tags for prioritization, resource allocation, 
security access control, or many other piuposes related to the database statement. 
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AN EMBODIMENT OF THE DATABASE SERVER 

[0019] The contents of FIG. 1 are first described briefly. The brief description is followed 

by a more detailed description of each of the components of FIG. 1, which is followed by a 
discussion of how the components FIG. 1 cooperate together. 

[0020] FIG. 1 shows a system 100 in which control information is sent with database 

statements, upon which an embodiment of the present invention may be implemented. System 100 
includes user 102, statement 103a, tag 103b, and database server 104. Database server 104 
includes other database components 105, parser 106, tag handler 108, tag storage 110, execution 
engine 1 12, tag implementer 1 14, security module 116, user supplied routine handler 118, 
administrator 120, and scheduling module 122. An altemative embodiment of system 100 and 
database server 104 may not include all of the components Usted above or may contain other 
components in addition to or instead of those listed above. 

[0021] User 102 is a user appUcation, process or other object. User 102 is used for 

submitting database statements to the database server. Statement 103a is a database statement sent 
by user 102 for execution by a database server. Statement 103 a may be a query, command, or any 
other type of database statement. Some examples of statement 103a are select statements, update 
statements, and delete statements. Statement 103a is one or more lines of code in a declarative 
language used for sending instructions to database servers. 

[0022] Tag 103b includes control information such as information related to priority, 

quality of service, user identification, security, and/or user suppHed routines that is appended to, 
attached to, sent with, embedded in or otherwise associated with database statement 103a. The 
control information provided via tag 103b may be used for allocating resources, for example. Tag 
103b may used to convey information about the database statement to other applications or 
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database components. Tag 103b may be in the fomiat of a markup language, such as Extensible 
Markup Language (XML). 

[0023] Database server 104 is a computer, computer peripheral, device on a network, and/or 

computer program that manages database resources and processes database statements. For 
example, database server 104 may include a database server or hardware that runs the database 
server. Database server 104 receives statement 103a and tag 103b. Database 104 parses and 
executes database statement 103a in accordance with the information contained in tag 103b, and 
then retums the results to user 102. For example, according to the information in tag 103b, 
statement 103 a may be given a particular level of priority. Based on the priority level determined 
from tag 103b, database server 104 may process database statement a head of or after other 
database statements that have not yet been received, waiting to be processed, or that are currently 
being processed. Similarly, based on information in tag 103b database server 104 may restrict 
database statement 103a from accessing or granting database statement 103a access to information 
in, components associated with database server 104 and/or its associated database. 
[0024] Other database components 105 is any hardware and/or software components that 

are included in database server 104 in addition to parser 106, tag handler 108, tag storage 110, 
execution engine 1 12, tag implementer 114, security module 1 16, user supplied routine handler 
118, administrator 120, and scheduling module 122. Other database components 105 may include 
other components that are optional and/or other components that are necessary for database server 
104 to ftmction. For example, other database components 105 may include components for 
handling user sessions and user contexts. 

[0025] Parser 106 parses database statements. Parser 106 may translate the database 

statements into a format (e.g., a tree) convenient for an execution engine to interpret. Tag handler 
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108 reads and stores tag 103b and stores the information contained in tag 103b in a manner such 
that the information in tag 103b is associated with statement 103a. Tag handler 108 may be a part 
of, contained within, an extension of, a separate unit form parser 106, for example. Tag storage 
1 10 is a storage area in long term or short term memory where tag handler 108 stores the 
information derived from tag 103b. Tag storage 110 may be a set of fields in the same records used 
for storing the parsed version of the database statements. In this embodiment, tag information 
derived from tag 103b is stored in the same record as the parsed version of statement 103a. In this 
specification information derived from a tag is to be understood as being generic to the tag itself, 
specifically the unaltered contents of the tag itself Tag storage 110 may be a separate storage 
device, a separate storage media (e.g., a separate disk), or may be one or more regions within one 
or more storage media of one or more storage devices dedicated for storing tags, for example. The 
storage areas that make up Tag storage 1 10 may be regions dedicated to storing tag information or 
regions where the tag information happens to be stored currently, but is not any specific dedicated 
region. 

[0026] Execution engine 1 12 interprets the parsed version of database statement 103 a or 

otherwise converts the parsed version of database statement 103a into instructions that execution 
engine 1 12 carries out. 

[0027] Tag implementer 114 retrieves the tag information stored in tag storage 110. Tag 

implementer may interpret the tag information or otherwise converts the tag information into 
instructions tag implementer 114 carries out. Tag implementer 114 may convert the tag 
information into instructions and/or a format that another component can handle. Tag implementer 
114 may be a part of, contained within, an extension of, a separate unit from execution engine 112, 
for example. 
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[0028] Security module 116 enforces a security policy that protects the database server 

and/or it associated database from user 102 and/or database statement 103a from accessing data 
and/or components to which user 102 and/or database statement 103a are not entitled to access. In 
other words, security module 116 determines which components and/or data user 102 and/or 
database statement 103a are entitled to access. Security module 116 receives instructions and/or 
information from tag implementer 1 16, based on tag infomiation derived from tag 103b, that relates 
to a level of security associated with database statement 103a and/or user 102. 
[0029] User supplied routine handler 118 handles routines supplied by user 102 that specify 

procedures related to executing database statement 103a. User suppHed routine handler 118 
receives instructions and/or information from tag implementer 116, based on tag information 
derived from tag 103b, that relate how to process user supplied routines and/or which user supplied 
routines to use, for example. 

[0030] Administrator 120 may be software or hardware used by a systems administrator 

that automatically performs and/or oversees various administrative fiinctions such as scheduling the 
execution of database statements. Scheduling module 122 schedules database statement 103a for 
execution by execution engine 1 12. Scheduling module 122 may determine a priority level and/or 
receive an indication of a priority level associated with database statement 103a. Scheduling 
module 122 may then use the priority level to determine when to schedule database statement 103a 
for execution relative to other database statements. For example, if database statement 103a has a 
very high priority, the execution of other database statements may be stopped in order to free 
resources for executing statement 103a. Scheduling module 122 may be capable of automatically 
and/or manually scheduHng statement 103a for execution. For example, a systems administrator 
may use scheduling module 122 to view the tag information derived from tag 103b and reschedule 
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the execution of statement 103a. Scheduling module 122 may be a part of, contained within, an 
extension of, a separate unit form administrator 120, for example. 

[0031] Security module 1 16, user supplied routine handler 1 18, and/or scheduling module 

122 may also receive input, such as user context inforaiation, from other database components 105 
relating to how to process statement 103a while a session window associated with statement 103a is 
still open. A session window refers to a period of time during which a communicative connection 
exists between user 102 and database 104. 

[0032] Thus, user 102 issues statement 103a and associates tag 103b with statement 103a. 

Statement 103a and tag 103b are sent to database server 104. In database 104, parser 108 parses 
statement 103a. Tag handler stores tag 103b in tag storage 110 and maintains an association 
between the statement 103a and the stored information derived from tag 103b. Depending on the 
content of the tag information and/or the needs to security module 116, user supplied routine 
handler 118, and/or scheduling module 122, tag implementer 114 provides the tag information, 
other information based on the tag information, and/or instructions based on the tag information to 
security module 1 16, user supplied routine handler 118, and/or scheduling module 122. Security 
module 114, user supplied routine handler 118, and/or scheduling module 122 cause statement 
103 a to be executed by execution engine 1 12 and otherwise processed by administrator 102 and/or 
other components 105 in accordance with the tag information derived from tag 103b, regardless of 
whether the session window associated with user 102 is still open. After executing statement 103 a, 
the execution results are returned to user 102. 



EXAMPLE OF EXECTION INTERFACE 
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[0033] An example of an execution interface for executing database statements with the tag 

field is 

DBMS_SQL.PARSE(cursor, statement, language flag, control tag) 

In this example, the DBMS_SQL_PARSE parses an SQL statement. The first argument "cursor" is 
an integer that is used for keeping track of whether the SQL statement has executed. For example, 
the cursor may have a value of "0" if the SQL statement has executed and a value of "1" if the SQL 
statement has not executed. In an embodiment, "cursor" is an ID number of the cursor in which to 
parse the statement. The second argument "statement" contains the text of the SQL statement. The 
third argument "language" may contain an indication of the version the SQL statement is written, 
such as which version of Oracle to use. The final argument, "control tag," is an example of a tag 
field for inputting information for tag 103b, and may contain information identifying the 
application and/or user that issued the SQL statement. 
[0034] For example, the execution interface may be 

DBMS_SQL.PARSE(cursr,*SELECT * FROM emp^ v7, 'resource=gl id=scotf) 

In this example, an integer variable "cursr" contains the value of the cursor, the statement being 
parsed is 

SELECT * FROM emp; 
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Although in this example, a select statement is used an update, delete or any other type of database 
statement may also be used. The value of the third argument is "v7", which indicates that the SQL 
statement was written using version 7 of SQL. The value of the control tag is "resource=gl 
id=scott", which may indicate that the component or application issuing the SQL statement has ID 
"gl and the ID of the user that wrote the database statement is "scott". Using this information, 
security module 116 may be able to determine a security level, and scheduling module 122 may be 
able to determine a priority level. 

[0035] The DBMS_SQL.PARSE procedure, using parser 106, parses the given statement 

(e.g., statement 103a) in a given cursor. In an embodiment, all statements are parsed immediately, 
and in addition, DDL statements are run immediately when parsed. In an embodiment, the 
procedure concatenates elements of a PL/SQL table statement and parses the resulting string. 

MONITORING LAYER 

[0036] A monitoring layer may be included in the database server that is capable of 

exposing the information in tag 103b. For example, the monitoring layer may include a function 
capable of returning performance data to administrator 120 and/or user 102. The data retumed may 
also include a column showing the tag information associated with tag 103b. 

AN EXAMPLE OF AN XML SYNTAX FOR A TAG 

[0037] Furthermore, the tag can be sent in XML. By sending the tags in XML the database 

server can use standard routines to understand the metadata submitted by the applications or users. 
For example, a tag may be 
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<SQL attributes> 

<resource> gl o 

<id> scott o 
<SQL attributes> 

In the above XML statements, the first "<SQL attributes>" indicates the beginning of the tag, and 
the second "<SQL attributes>". The name of the resource issuing the SQL statement is identified 
as "gl", where "<resource>" denotes the beginning of the resource name and "o" denotes the end 
of the resource name. Similarly, the ID of the developer that wrote the SQL statement is identified 
as "scot", where "<id>" denotes the beginning of the ID and "o" denotes the end of the ID. 

HARDWARE OVERVIEW 

[0038] FIG. 2 is a block diagram that illustrates a computer system 200 upon which an 

embodiment of the invention may be implemented. Computer system 200 includes a bus 202 or 
other communication mechanism for communicating information, and a processor 204 coupled 
with bus 202 for processing information. Computer system 200 also includes a main memory 206, 
such as a random access memory (RAM) or other dynamic storage device, coupled to bus 202 for 
storing information and instructions to be executed by processor 204. Main memory 206 also may 
be used for storing temporary variables or other intermediate information during execution of 
instructions to be executed by processor 204. Computer system 200 fiirther includes a read only 
memory (ROM) 208 or other static storage device coupled to bus 202 for storing static information 
and instructions for processor 204. A storage device 210, such as a magnetic disk or optical disk, is 
provided and coupled to bus 202 for storing information and instructions. 
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[0039] Computer system 200 may be coupled via bus 202 to a display 212, such as a 

cathode ray tube (CRT), for displaying information to a computer user. An input device 214, 
including alphanumeric and other keys, is coupled to bus 202 for communicating information and 
command selections to processor 204. Another type of user input device is cursor control 216, such 
as a mouse, a trackball, or cursor direction keys for communicating direction information and 
command selections to processor 204 and for controlling cursor movement on display 212. This 
input device typically has two degrees of freedom in two axes, a first axis (e.g., x) and a second 
axis (e.g., y), that allows the device to specify positions in a plane. 

[0040] The invention is related to the use of computer system 200 for implementing the 

techniques described herein. In an embodiment, cUent-side 102 and/or server-side 110 may reside 
on a machine such as computer system 200. In an embodiment, database 118 may be a machine 
such as computer system 200. According to one embodiment of the invention, the techniques 
described herein are performed by computer system 200 in response to processor 204 executing one 
or more sequences of one or more instructions contained in main memory 206. Such instructions 
may be read into main memory 206 from another computer-readable medium, such as storage 
device 210. Execution of the sequences of instructions contained in main memory 206 causes 
processor 204 to perform the process steps described herein. In altemative embodiments, hard- 
wired circuitry may be used in place of or in combination with software instructions to implement 
the invention. Thus, embodiments of the invention are not limited to any specific combination of 
hardware circuitry and software. 

[0041] The term "computer-readable medium" as used herein refers to any medium that 

participates in providing instructions to processor 204 for execution. The computer-readable 
medium is just one example of a machine-readable medium, which may carry instructions for 
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implementing any of the methods and/or techniques (e.g., method 500) described herein. Such a 
medium may take many fomis, including but not limited to, non-volatile media, volatile media, and 
transmission media. Non- volatile media includes, for example, optical or magnetic disks, such as 
storage device 210. Volatile media includes dynamic memory, such as main memory 206. 
Transmission media includes coaxial cables, copper wire and fiber optics, including the wires that 
comprise bus 202. Transmission media can also take the form of acoustic or light waves, such as 
those generated during radio-wave and infi-a-red data communications. 

[0042] Common forms of computer-readable media include, for example, a floppy disk, a 

flexible disk, hard disk, magnetic tape, or any other magnetic medium, a CD-ROM, any other 
optical medium, punchcards, papertape, any other physical medium with patterns of holes, a RAM, 
a PROM, an EPROM, a FLASH-EPROM, any other memory chip or cartridge, a carrier wave as 
described hereinafter, or any other medium from which a computer can read. 
[0043] Various forms of computer readable media may be involved in carrying one or more 

sequences of one or more instructions to processor 204 for execution. For example, the instructions 
may initially be carried on a magnetic disk of a remote computer. The remote computer can load 
the instructions into its dynamic memory and send the instructions over a telephone line using a 
modem. A modem local to computer system 200 can receive the data on the telephone line and use 
an infra-red transmitter to convert the data to an infra-red signal. An infra-red detector can receive 
the data carried in the infra-red signal and appropriate circuitry can place the data on bus 202. Bus 
202 carries the data to main memory 206, from which processor 204 retrieves and executes the 
instructions. The instructions received by main memory 206 may optionally be stored on storage 
device 210 either before or after execution by processor 204. 
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[0044] Computer system 200 also includes a communication interface 218 coupled to bus 

202. Communication interface 218 provides a two-way data communication coupling to a network 
link 220 that is connected to a local network 222. For example, communication interface 218 may 
be an integrated services digital network (ISDN) card or a modem to provide a data communication 
connection to a corresponding type of telephone line. As another example, conununication 
interface 218 may be a local area network (LAN) card to provide a data communication connection 
to a compatible LAN. Wireless links may also be implemented. In any such implementation, 
communication interface 218 sends and receives electrical, electromagnetic or optical signals that 
carry digital data streams representing various types of information. 

[0045] Network link 220 typically provides data communication through one or more 

networks to other data devices. For example, network link 220 may provide a connection through 
local network 222 to a host computer 224 or to data equipment operated by an Intemet Service 
Provider (ISP) 226. ISP 226 in turn provides data communication services through the world wide 
packet data conununication network now commonly referred to as the "Intemet" 228. Local 
network 222 and Intemet 228 both use electrical, electromagnetic or optical signals that carry 
digital data streams. The signals through the various networks and the signals on network link 220 
and through communication interface 218, which carry the digital data to and from computer 
system 200, are exemplary forms of carrier waves transporting the information. 
[0046] Computer system 200 can send messages and receive data, including program code, 

through the network(s), network link 220 and communication interface 218. In the Intemet 
example, a server 230 might transmit a requested code for an application program through Intemet 
228, ISP 226, local network 222 and communication interface 218. 
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[0047] The received code may be executed by processor 204 as it is received, and/or stored 

in storage device 210, or other non-volatile storage for later execution. In this manner, computer 
system 200 may obtain application code in the form of a carrier wave. 

[0048] In the foregoing specification, embodiments of the invention have been described 

with reference to numerous specific details that may vary fi-om implementation to implementation. 
Thus, the sole and exclusive indicator of what is the invention, and is intended by the applicants to 
be the invention, is the set of claims that issue fi"om this application, in the specific form in which 
such claims issue, including any subsequent correction. Any definitions expressly set forth herein 
for terms contained in such claims shall govem the meaning of such terms as used in the claims. 
Hence, no hmitation, element, property, feature, advantage or attribute that is not expressly recited 
in a claim should limit the scope of such claim in any way. The specification and drawings are, 
accordingly, to be regarded in an illustrative rather than a restrictive sense. 
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